Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: GJmHOJPR3Z4nWTL+ruCSroYvKXlaoPgCV4oZZ05TyB4=
Subject key identifier: FA:1C:F0:E3:AA:C3:2F:D6:BF:B0:6A:7A:83:AC:D6:25:DB:62:B3:E2
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019E20FEF687FDFAD088B72A5A6A435CD30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 16E7
Signing time: Wed 13 May 2026 11:00:40 +0000
Manifest this update: Wed 13 May 2026 11:00:40 +0000
Manifest next update: Thu 14 May 2026 11:00:40 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: eBOZYXkhWnTPhe7i4FOyzfzJBfuoUEby6sJO5cCTz1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:f6:87:fd:fa:d0:88:b7:2a:5a:6a:43:5c:d3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: May 13 11:00:40 2026 GMT
Not After : May 14 11:00:40 2026 GMT
Subject: CN=fa1cf0e3aac32fd6bfb06a7a83acd625db62b3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:cd:43:d7:61:44:3f:ff:d3:02:16:71:bf:
48:ae:df:57:9a:5e:71:d7:47:29:05:04:37:34:ad:
c3:90:48:ce:a1:ee:db:d9:7b:19:26:96:15:57:c1:
4a:4c:b7:2d:59:53:7d:83:91:fe:27:ff:43:ab:98:
38:7e:85:95:32:6c:1f:cb:8f:47:c8:67:d2:0a:ab:
d6:c2:ab:cd:43:67:de:17:e0:77:6a:5d:d1:9d:d7:
72:11:c0:cd:05:cc:4a:7f:48:94:8e:a6:27:6f:49:
59:a7:cb:da:45:14:93:af:44:43:69:74:dd:23:75:
71:92:bb:0f:f3:2a:15:45:67:e6:ea:52:24:44:23:
ff:43:64:eb:cb:f3:38:8d:27:d7:11:98:74:44:e6:
d5:b1:a6:98:ff:6f:93:40:31:3d:cb:97:3b:06:ae:
28:f6:fa:8b:f9:f8:b7:35:25:c5:39:32:37:a2:60:
b7:f4:2b:ff:99:f8:be:4b:79:c5:55:6b:73:7a:f3:
bc:a0:1f:a2:a3:d7:86:12:84:c5:3a:9a:e5:b5:01:
e7:98:d4:32:53:bb:0b:fb:25:5a:ea:50:f3:1b:d2:
49:2b:5d:fc:d7:1b:dc:9b:02:01:1f:5b:7b:ab:4b:
40:02:a4:6f:df:5c:56:ab:83:44:aa:60:d3:84:09:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:F0:E3:AA:C3:2F:D6:BF:B0:6A:7A:83:AC:D6:25:DB:62:B3:E2
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:82:15:05:b7:69:9a:a4:f9:44:3f:cc:54:e3:12:71:8d:c0:
25:5a:88:7d:e1:38:a2:db:98:1c:b9:a2:1b:94:eb:87:86:b9:
28:6b:84:a9:f4:ba:9f:7c:a3:7f:11:cc:56:b5:13:8a:fd:1c:
a8:76:68:9e:97:3e:97:d1:cc:db:a1:32:c1:27:60:e9:97:35:
d6:68:e2:a8:6d:00:2f:28:62:fd:f5:e9:ed:0b:d1:2d:1b:b6:
d9:e9:2b:e7:2a:f6:18:1f:13:33:27:04:d7:d3:85:b2:4a:54:
fe:52:4f:69:ba:96:29:ce:67:b7:07:f4:94:63:77:69:f0:e6:
81:dd:91:15:14:6e:fb:03:c3:66:63:ad:e1:18:bb:fd:fa:dc:
db:6b:a6:d3:57:87:d5:4b:5f:ce:f4:05:2f:dd:51:ea:0b:93:
ff:bd:8d:63:97:d8:f1:4b:d3:fb:d6:9a:e1:8b:28:66:93:c3:
c6:11:39:74:20:e2:9f:60:30:a3:db:39:c2:ea:ec:79:ca:76:
a0:ad:16:79:88:3b:e2:ed:2c:ba:d9:83:86:57:08:9b:9b:a1:
94:30:e6:64:b0:b7:ef:ef:e1:4a:f6:74:d6:49:40:15:bc:9f:
12:1a:78:c5:5e:fb:3f:7c:a3:08:8d:86:69:3c:34:aa:54:9a:
cb:cb:45:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/vaH/frQiLcqWmpDXNMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl
Y2QxZmYwHhcNMjYwNTEzMTEwMDQwWhcNMjYwNTE0MTEwMDQwWjAzMTEwLwYDVQQD
EyhmYTFjZjBlM2FhYzMyZmQ2YmZiMDZhN2E4M2FjZDYyNWRiNjJiM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPLNQ9dhRD//0wIWcb9Irt9Xml5x
10cpBQQ3NK3DkEjOoe7b2XsZJpYVV8FKTLctWVN9g5H+J/9Dq5g4foWVMmwfy49H
yGfSCqvWwqvNQ2feF+B3al3RnddyEcDNBcxKf0iUjqYnb0lZp8vaRRSTr0RDaXTd
I3VxkrsP8yoVRWfm6lIkRCP/Q2Try/M4jSfXEZh0RObVsaaY/2+TQDE9y5c7Bq4o
9vqL+fi3NSXFOTI3omC39Cv/mfi+S3nFVWtzevO8oB+io9eGEoTFOprltQHnmNQy
U7sL+yVa6lDzG9JJK1381xvcmwIBH1t7q0tAAqRv31xWq4NEqmDThAlxhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoc8OOqwy/Wv7BqeoOs1iXbYrPiMB8GA1UdIwQY
MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt
MTQ3YWRjOTBjYTBmLzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm
LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4IVBbdp
mqT5RD/MVOMScY3AJVqIfeE4otuYHLmiG5Trh4a5KGuEqfS6n3yjfxHMVrUTiv0c
qHZonpc+l9HM26EywSdg6Zc11mjiqG0ALyhi/fXp7QvRLRu22ekr5yr2GB8TMycE
19OFskpU/lJPabqWKc5ntwf0lGN3afDmgd2RFRRu+wPDZmOt4Ri7/frc22um01eH
1UtfzvQFL91R6guT/72NY5fY8UvT+9aa4YsoZpPDxhE5dCDin2Awo9s5wursecp2
oK0WeYg74u0sutmDhlcIm5uhlDDmZLC37+/hSvZ01klAFbyfEhp4xV77P3yjCI2G
aTw0qlSay8tF1A==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:41 2026 by rpki-client